okbat Privacy Policy
How we handle your personal information — transparently.

okbat ("we", "our", "us") is committed to protecting the privacy and personal data of every player and visitor who interacts with the okbat platform at okbat.cam. This Privacy Policy ("Policy") describes how okbat collects, processes, stores, shares, and protects personal data in accordance with the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC).

This Policy applies to all personal data processed by okbat in connection with your use of the okbat platform, including account registration, game play, payment transactions, customer support interactions, and any other activity conducted through or in relation to okbat.cam. It covers data collected through the website, mobile browser sessions, live chat, SMS communications, and any other channel through which you interact with okbat.

By registering an account with okbat or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, you should not create or continue to use an okbat account.

For the purposes of the Philippine Data Privacy Act of 2012, okbat acts as the Personal Information Controller (PIC) for all personal data collected and processed through the okbat platform. As PIC, okbat determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

okbat operates the platform under a license from PAGCOR (Philippine Amusement and Gaming Corporation). This licensing relationship imposes regulatory data processing obligations on okbat, including the collection of Know Your Customer (KYC) data and the reporting of certain transaction data to the Anti-Money Laundering Council (AMLC) where required by law.

Where okbat engages third-party service providers to process personal data on its behalf — such as payment processors, game providers, or KYC verification services — those parties act as Personal Information Processors (PIPs) under the DPA and are bound by data processing agreements that restrict their use of your data to the specific purposes for which it was shared.

okbat collects the following categories of personal data, depending on your level of interaction with the platform:

okbat does not collect sensitive personal information as defined under the DPA (such as racial or ethnic origin, religious beliefs, health data, or political affiliations) unless specifically required by PAGCOR regulations in the context of responsible gaming assessments, in which case explicit consent will be obtained separately.

okbat collects personal data through the following channels and methods:

4.1 Direct Collection

Data you provide directly when you register an account with okbat (mobile number, date of birth), complete KYC verification (government-issued ID, selfie photograph), make deposits or withdrawal requests (payment method details), contact customer support (live chat messages, support ticket submissions), or configure account settings including responsible gaming tools.

4.2 Automated Collection

Technical and behavioural data collected automatically when you access the okbat platform, including IP addresses, device identifiers, browser type, operating system, session duration, and navigation patterns. This data is collected through server logs, cookies, and similar tracking technologies as further described in Section 8.

4.3 Third-Party Sources

okbat may receive data about you from third-party sources in limited circumstances, including: identity verification services used for KYC processing; payment providers (GCash, Maya, BPI, BDO, Metrobank) confirming transaction details; fraud detection services identifying suspicious account activity; and regulatory authorities including PAGCOR and AMLC in the context of their oversight functions.

Under the Philippine Data Privacy Act of 2012, okbat processes personal data only where a lawful basis exists. The primary legal bases applicable to okbat's data processing activities are:

• Contract Performance: Processing necessary to provide the okbat gaming services under the Terms & Conditions you agreed to at registration — including account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with Philippine law and PAGCOR regulatory requirements, including KYC identity verification, anti-money laundering transaction monitoring and reporting, and age verification to enforce the 21+ gaming requirement.
• Legitimate Interests: Processing necessary for okbat's legitimate business interests, including fraud detection and prevention, platform security, responsible gaming monitoring, and improving platform performance — where these interests are not overridden by your privacy rights.
• Consent: Where none of the above bases applies, okbat will seek your explicit consent before processing. You may withdraw consent at any time without affecting the lawfulness of processing conducted before withdrawal.

okbat uses your personal data for the following specific purposes:

6.1 Platform Operations

Creating and managing your okbat account; processing GCash, Maya, and bank deposits and withdrawals; delivering game content and recording gaming activity; enforcing the one-account-per-player rule; and providing 24/7 customer support in Tagalog and English.

6.2 Regulatory Compliance

Verifying your identity and age in compliance with PAGCOR's KYC requirements; monitoring transactions for anti-money laundering purposes under RA 9160 and RA 10365; filing suspicious transaction reports with the AMLC where legally required; and maintaining records required by PAGCOR audit and inspection processes.

6.3 Security & Fraud Prevention

Detecting and preventing unauthorised account access, bonus abuse, multi-accounting, match-fixing, money laundering, and other prohibited activities described in the okbat Terms & Conditions; investigating suspicious activity; and sharing relevant data with PAGCOR or law enforcement where required by law.

6.4 Responsible Gaming

Monitoring gaming patterns to identify potential problem gambling behaviour; enforcing self-exclusion, cooling-off, and deposit limit settings applied by the player; and directing at-risk players to appropriate support resources. Responsible gaming data is handled with particular sensitivity and is not used for marketing purposes.

6.5 Platform Improvement

Analysing aggregated, anonymised usage data to improve platform performance, game selection, payment processing speed, and customer support quality. Individual player data used for this purpose is anonymised or pseudonymised before analysis.

6.6 Communications

Sending transactional communications necessary for your account (deposit confirmations, withdrawal updates, security alerts, OTP messages). okbat may also send promotional communications about offers and new games to players who have not opted out of such communications. You may opt out of promotional messages at any time via account settings or by contacting support.

okbat does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

7.1 Service Providers (Personal Information Processors)

Third-party companies that provide services to okbat under written data processing agreements, including: KYC identity verification providers; payment processors for GCash, Maya, BPI, BDO, and Metrobank transactions; game software providers (who may receive anonymised session data for game integrity monitoring); fraud detection and cybersecurity service providers; and cloud hosting infrastructure providers.

7.2 Regulatory & Law Enforcement Authorities

PAGCOR (Philippine Amusement and Gaming Corporation) as okbat's licensing authority; the Anti-Money Laundering Council (AMLC) where transaction reporting is required under RA 9160; the National Privacy Commission (NPC) in the event of a data breach or NPC investigation; and Philippine law enforcement authorities where disclosure is compelled by a valid court order or lawful authority.

7.3 Corporate Transactions

In the event of a merger, acquisition, sale of assets, or corporate restructuring involving okbat, your personal data may be transferred to the acquiring or successor entity, subject to the same data protection obligations described in this Policy.

okbat uses cookies and similar tracking technologies on the okbat.cam platform. Cookies are small text files placed on your device by your browser when you visit the platform. They serve the following functions:

8.1 Strictly Necessary Cookies

These cookies are essential for the okbat platform to function and cannot be disabled. They include session authentication tokens that keep you logged in to your okbat account, security cookies that prevent cross-site request forgery (CSRF), and load-balancing cookies that ensure stable platform performance.

8.2 Functional Cookies

These cookies remember your preferences such as language settings and responsible gaming tool configurations, enabling a more personalised experience on return visits.

8.3 Analytics Cookies

These cookies collect anonymised data about how players navigate the okbat platform — which pages are visited most, how long sessions last, and where players encounter difficulties. This data is used solely to improve the platform and is not linked to your personal identity.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the okbat platform. Disabling functional or analytics cookies will not prevent you from using the platform but may affect your user experience.

okbat retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account data and KYC documents: Retained for a minimum of five (5) years following account closure, as required by PAGCOR's record-keeping obligations and RA 9160 (Anti-Money Laundering Act).
• Transaction records: Retained for a minimum of five (5) years in compliance with AMLC record-keeping requirements.
• Gaming history: Retained for five (5) years following the last gaming activity in your account, for regulatory audit purposes.
• Customer support records: Retained for three (3) years following the resolution of the relevant support interaction.
• Responsible gaming records: Retained for the duration of any self-exclusion period plus five (5) years, to prevent circumvention of exclusion by re-registration.
• Technical and log data: Typically retained for twelve (12) months for security monitoring and fraud investigation purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original personal data.

okbat implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the okbat platform
• Encrypted storage of all personal data at rest in okbat's server infrastructure
• Password hashing using industry-standard cryptographic algorithms — passwords are never stored in plain text
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis
• Multi-factor authentication requirements for okbat staff accessing systems containing personal data
• Regular security assessments and penetration testing of the okbat platform
• Contractual data security obligations imposed on all third-party service providers handling okbat player data
• An incident response plan aligned with NPC notification requirements in the event of a data breach

While okbat takes all reasonable precautions, no internet-based platform can guarantee absolute security. Players are encouraged to maintain strong, unique passwords for their okbat accounts and to enable SMS OTP two-factor authentication to reduce the risk of unauthorised account access.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by okbat. You may exercise these rights by contacting our Data Protection Officer using the contact details in Section 15.

Requests to exercise privacy rights will be acknowledged within five (5) business days and resolved within thirty (30) calendar days, as required by the DPA. If okbat requires an extension, you will be notified with an explanation. Identity verification may be required before processing your request.

The okbat platform is strictly for individuals aged twenty-one (21) years and above. This is a mandatory requirement under PAGCOR's online gaming regulations for the Philippines. okbat does not knowingly collect personal data from individuals under the age of 21.

Parents or guardians who believe a minor may have created an okbat account should contact the Data Protection Officer immediately with supporting information. okbat will investigate and take prompt action. Registration controls — including mobile number verification and mandatory KYC — are in place to minimise the risk of underage access, but no system is infallible, and parental supervision of internet usage remains important.

okbat's primary server infrastructure is located within the Philippines. In limited circumstances, personal data may be processed by third-party service providers whose systems are located outside the Philippines — for example, game software providers, fraud detection platforms, or cloud infrastructure providers with data centres in other jurisdictions.

Where personal data is transferred outside the Philippines, okbat ensures that appropriate safeguards are in place to protect the data to a standard equivalent to Philippine law requirements. These safeguards include contractual clauses aligned with NPC standards and, where applicable, verification that the recipient jurisdiction has adequate data protection laws as assessed by the NPC.

Cross-border transfers are limited to circumstances where they are necessary for the performance of the contract between okbat and the player, for the establishment, exercise, or defence of legal claims, or where the player has given explicit informed consent to the transfer.

okbat reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidelines, or PAGCOR regulatory requirements. Material changes to this Policy will be communicated to registered players via an in-platform notification at next login or via SMS to the registered mobile number.

The updated Policy will be published on this page at okbat.cam/privacy-policy with a revised effective date. Your continued use of the okbat platform following the publication of an updated Policy constitutes your acceptance of the changes. If you do not agree with the updated Policy, you should close your account and cease using the platform.

We encourage you to review this page periodically. The current version of this Privacy Policy, identified by the effective date at the top of this document, is always the governing version.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how okbat handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

If you are not satisfied with okbat's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information about how to file an NPC complaint is available on the NPC's official website.

This Privacy Policy was last reviewed and updated on 1 January 2026 and is effective from that date.